Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
File: PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft (raw, json)
Hash identifier: vI1o5ZTWb4e7o0xGvjLIj80Hp8YbdBU/nSRH4NwcHgo=
Subject key identifier: 71:B4:09:83:9D:BA:4C:BD:73:13:7D:44:72:5E:DE:2A:E4:4B:5D:0A
Authority key identifier: 3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
Certificate issuer: /CN=3c48b92e8094d7780217e3254c59720bc2a97638
Certificate serial: 019F8ED98C392F7541D92BEF989DB99638E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
Manifest number: 02DE
Signing time: Thu 23 Jul 2026 12:00:49 +0000
Manifest this update: Thu 23 Jul 2026 12:00:49 +0000
Manifest next update: Fri 24 Jul 2026 12:00:49 +0000
Files and hashes: 1: PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl (hash: VOIIHxkfZbJnbe8swaioOOAtAauUSj7FQ5X+vhuGlCw=)
2: Xu6LJ5NwOjulzYk7ThddVSSoUcw.roa (hash: lwbMkRX85sGp49MdbyhTOstP4KWwGOTsiskzrGm1TQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:8c:39:2f:75:41:d9:2b:ef:98:9d:b9:96:38:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c48b92e8094d7780217e3254c59720bc2a97638
Validity
Not Before: Jul 23 12:00:49 2026 GMT
Not After : Jul 24 12:00:49 2026 GMT
Subject: CN=71b409839dba4cbd73137d44725ede2ae44b5d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:9c:b9:9f:8d:b9:d1:fe:6a:7b:dc:a5:b5:
06:1a:50:13:a4:75:98:f6:c6:04:4a:06:e8:11:52:
d5:5b:8c:41:23:7c:59:39:3f:8f:25:c8:50:aa:76:
39:83:d4:93:bf:ef:12:72:ce:7a:e2:74:a2:89:48:
42:17:01:e4:5a:c7:60:e1:19:87:61:a4:62:e3:76:
33:ad:8c:2c:5e:10:67:41:ab:8f:3d:26:e1:da:5f:
41:9b:49:0d:5d:47:82:d9:c7:db:40:d0:75:74:25:
e4:eb:ff:0a:1c:a1:ab:05:32:1c:9f:34:4a:c5:49:
6b:ce:8c:3f:20:45:9d:cd:2a:17:72:a7:48:c4:2e:
26:ca:b8:21:f1:23:65:df:b7:06:0c:96:12:69:59:
65:bc:8e:c6:8e:ba:44:36:69:32:9c:a0:5b:6e:8c:
5c:dc:7e:87:be:37:1b:e9:05:7d:51:17:70:6f:d9:
dc:35:e0:5e:23:7a:6b:4a:1d:af:0b:d5:c7:a1:9a:
37:cc:a0:5c:50:f4:3b:a2:b2:a2:b3:d1:70:5a:52:
7e:34:b7:93:5d:4e:30:d3:7e:9a:2b:ce:b3:ec:de:
51:a7:c3:58:ab:e2:57:fe:69:18:ac:16:1d:3d:a2:
92:e6:64:38:49:64:47:6f:01:21:85:72:96:3b:86:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:09:83:9D:BA:4C:BD:73:13:7D:44:72:5E:DE:2A:E4:4B:5D:0A
X509v3 Authority Key Identifier:
keyid:3C:48:B9:2E:80:94:D7:78:02:17:E3:25:4C:59:72:0B:C2:A9:76:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEi5LoCU13gCF-MlTFlyC8Kpdjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/870c2a-394c-45c2-a434-b21e0f4c0c0a/1/PEi5LoCU13gCF-MlTFlyC8Kpdjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:46:91:17:75:df:40:78:57:c3:2b:63:44:3a:0b:2e:dd:2a:
27:1c:a3:b5:15:6b:67:8b:c7:08:89:9e:87:29:00:c2:55:a0:
9e:fe:78:bf:5a:2f:5f:9a:9b:ce:81:18:c7:a7:20:5a:6b:55:
dc:c9:03:85:78:43:c2:93:cd:bf:c3:f6:75:fe:35:5c:58:21:
6d:ed:69:a1:ab:bc:59:b8:93:18:c3:6f:89:0e:5c:54:c8:ec:
91:9c:1a:b2:a5:4a:69:0a:91:d2:03:57:11:5c:52:b0:e1:cd:
88:4e:aa:9b:4f:50:27:bf:70:06:0d:63:81:0f:f7:16:01:31:
c6:2e:ea:18:c9:8c:28:1d:dc:9f:ff:ab:b7:c7:3f:b0:d0:a4:
4d:26:f2:f5:c2:ae:14:fc:b1:86:59:1f:0c:28:97:60:1d:68:
32:f3:31:e3:a6:91:1d:10:8c:6f:f9:c6:01:f0:de:b3:27:c8:
f3:5a:25:b8:cd:02:3d:fb:0f:67:e7:fc:3f:60:d2:77:40:59:
f2:fb:f6:32:1d:7f:25:27:16:3b:a7:a9:a8:43:80:77:55:ec:
97:e9:3a:af:de:14:41:24:74:19:25:50:eb:a9:46:a5:06:dd:
d7:4a:86:08:2a:c7:43:2f:55:77:ad:11:52:d3:3a:87:45:b2:
6e:05:da:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2Yw5L3VB2SvvmJ25ljjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDhiOTJlODA5NGQ3NzgwMjE3ZTMyNTRjNTk3MjBiYzJh
OTc2MzgwHhcNMjYwNzIzMTIwMDQ5WhcNMjYwNzI0MTIwMDQ5WjAzMTEwLwYDVQQD
Eyg3MWI0MDk4MzlkYmE0Y2JkNzMxMzdkNDQ3MjVlZGUyYWU0NGI1ZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/icuZ+NudH+anvcpbUGGlATpHWY
9sYESgboEVLVW4xBI3xZOT+PJchQqnY5g9STv+8Scs564nSiiUhCFwHkWsdg4RmH
YaRi43YzrYwsXhBnQauPPSbh2l9Bm0kNXUeC2cfbQNB1dCXk6/8KHKGrBTIcnzRK
xUlrzow/IEWdzSoXcqdIxC4myrgh8SNl37cGDJYSaVllvI7GjrpENmkynKBbboxc
3H6Hvjcb6QV9URdwb9ncNeBeI3prSh2vC9XHoZo3zKBcUPQ7orKis9FwWlJ+NLeT
XU4w036aK86z7N5Rp8NYq+JX/mkYrBYdPaKS5mQ4SWRHbwEhhXKWO4byKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHG0CYOduky9cxN9RHJe3irkS10KMB8GA1UdIwQY
MBaAFDxIuS6AlNd4AhfjJUxZcgvCqXY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQt
YjIxZTBmNGMwYzBhLzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84NzBjMmEtMzk0Yy00NWMyLWE0MzQtYjIxZTBmNGMwYzBh
LzEvUEVpNUxvQ1UxM2dDRi1NbFRGbHlDOEtwZGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0aRF3Xf
QHhXwytjRDoLLt0qJxyjtRVrZ4vHCImehykAwlWgnv54v1ovX5qbzoEYx6cgWmtV
3MkDhXhDwpPNv8P2df41XFghbe1poau8WbiTGMNviQ5cVMjskZwasqVKaQqR0gNX
EVxSsOHNiE6qm09QJ79wBg1jgQ/3FgExxi7qGMmMKB3cn/+rt8c/sNCkTSby9cKu
FPyxhlkfDCiXYB1oMvMx46aRHRCMb/nGAfDesyfI81oluM0CPfsPZ+f8P2DSd0BZ
8vv2Mh1/JScWO6epqEOAd1Xsl+k6r94UQSR0GSVQ66lGpQbd10qGCCrHQy9Vd60R
UtM6h0WybgXa9w==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:44 2026 by rpki-client